Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/vjhjoYKp40go1Bw2dzCcL2KajIM.roa
File: vjhjoYKp40go1Bw2dzCcL2KajIM.roa (raw, json)
Hash identifier: cv0ZJRp8sP0YX0JwdcPj3aWvkT18UnzTXN3TvtSBPpY=
Subject key identifier: BE:38:63:A1:82:A9:E3:48:28:D4:1C:36:77:30:9C:2F:62:9A:8C:83
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018D2CEFD5612FA06DCFBF3B7F3CA5A020BA
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/vjhjoYKp40go1Bw2dzCcL2KajIM.roa
Signing time: Sun 21 Jan 2024 16:52:11 +0000
ROA not before: Sun 21 Jan 2024 16:52:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 94.103.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 18:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2c:ef:d5:61:2f:a0:6d:cf:bf:3b:7f:3c:a5:a0:20:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 21 16:52:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be3863a182a9e34828d41c3677309c2f629a8c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:c4:69:33:da:43:b0:ba:1a:e1:0f:cc:86:
f3:20:4e:7e:01:07:77:95:db:8a:09:aa:68:a7:e1:
a9:c7:06:a2:fc:2e:ae:52:c0:2e:48:c7:6a:92:73:
39:27:20:5c:2d:c1:db:56:dc:b8:6f:6c:52:96:5d:
ad:ca:ed:53:7b:7a:38:e1:d2:0d:67:16:94:20:9c:
09:d9:f5:d1:1c:85:3b:b7:35:fc:c8:27:c0:08:1d:
5b:8b:f0:e0:3e:37:b2:1e:c0:77:c1:6b:fe:00:15:
2b:d7:c7:f7:aa:6a:e0:0e:0c:af:e0:a8:9b:63:ef:
8a:cf:68:9a:00:16:06:ae:43:4b:c5:6b:fb:50:3f:
b4:eb:6d:a9:c7:69:cf:26:80:5a:cf:db:db:29:f7:
d7:93:d7:a8:b2:7b:d1:eb:7e:a1:b9:5e:14:88:ed:
14:32:d6:27:b5:ef:6d:ea:ee:d0:ee:4f:35:3a:e3:
ec:20:71:92:21:36:4b:7b:19:5f:d2:d1:c6:c7:41:
56:4b:2e:30:91:ac:b1:63:44:ac:1b:d9:f8:11:a7:
84:b6:29:e3:8d:e7:6f:46:26:7c:c9:0e:d4:66:d6:
b2:37:8c:b4:e1:e4:22:b0:81:2a:d5:7f:f9:6f:50:
ba:de:40:a2:4e:ee:6f:79:69:47:64:05:8c:68:86:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:63:A1:82:A9:E3:48:28:D4:1C:36:77:30:9C:2F:62:9A:8C:83
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/vjhjoYKp40go1Bw2dzCcL2KajIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:43:ae:9b:63:d8:c1:d3:9e:31:bb:d0:19:bc:5e:67:af:1a:
35:c3:16:99:8a:55:fb:97:63:b9:87:ec:01:4c:cf:97:2e:f2:
ba:36:23:1e:be:03:f7:9d:12:8e:d4:0d:f7:49:d7:29:e5:c1:
98:aa:f7:0e:fb:fa:3e:c2:a7:5e:cb:27:1a:54:a9:af:1c:22:
85:89:c1:10:6a:2e:7f:4f:37:d8:79:a3:11:bc:2f:22:3c:ec:
24:63:7b:2d:45:cf:ae:ab:45:0d:0f:13:6d:db:e1:4e:3e:39:
77:d6:86:4e:e1:ae:02:96:05:e9:1c:b9:b1:97:35:1f:d7:8f:
6c:6f:0e:b9:2e:60:02:cd:93:68:ed:50:09:67:36:a3:60:9b:
ec:32:24:24:01:13:ac:95:73:f9:d0:27:b2:95:7a:3e:46:17:
55:36:fb:88:91:79:94:7a:01:63:8c:88:97:70:fd:80:53:06:
fb:f9:b3:51:2f:9f:59:d6:83:55:03:1d:2e:d4:97:4f:01:cf:
9c:7c:52:03:1c:de:8f:37:cb:2e:8c:8e:ef:be:81:d6:9e:5f:
76:8e:61:61:fa:3a:b0:ee:10:88:e7:d0:6d:5b:54:2c:56:1e:
70:c7:c4:93:6b:fe:eb:6e:0c:d8:8d:f4:05:90:2e:cb:6b:3c:
26:eb:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 23:18:12 2024 by rpki-client on console-ams.rpki-client.org